refactor: add FRONTEND_API_KEY to runtime config and update API key retrieval logic

src/backend/services/runtimeConfig.ts

@@ -1,6 +1,7 @@
 import { writeFileSync, existsSync } from 'fs';
 import { join } from 'path';
 import logger from './logger.js';
+import config from './config';
 
 /**
  * Generates the runtime configuration file (env.js) for the frontend
@@ -32,6 +33,7 @@ export function generateRuntimeConfig(
     // Generate env.js content
     const envConfig = {
       basePath: basePath || '/',
+      FRONTEND_API_KEY: config.apiKeys.frontend,
     };
 
     // eslint-disable-next-line @typescript-eslint/no-unused-vars

src/frontend/src/main.tsx

@@ -8,6 +8,7 @@ declare global {
   interface Window {
     env?: {
       basePath?: string;
+      FRONTEND_API_KEY: string;
     };
   }
 }

src/frontend/src/services/api.ts

@@ -21,7 +21,7 @@ const pathCombine = (baseUrl: string, path: string): string => {
 };
 
 const isDevelopment = import.meta.env.MODE === 'development';
-const API_KEY = import.meta.env.VITE_API_KEY || 'frontend-default-key';
+const API_KEY = window.env?.FRONTEND_API_KEY || import.meta.env.VITE_API_KEY;
 const BASE_URL = isDevelopment
   ? pathCombine(import.meta.env.VITE_API_URL, '/api')
   : '/api';